$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: nm/CeornIf8vOEcVG3ZuHIPPtl6Wl5MDUA5smvRILYU= Subject key identifier: 99:D6:A2:D6:F0:F5:7C:1E:0E:53:35:F2:2A:83:BF:C3:11:6B:66:0F Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 0509 Signing time: Sat 28 Jun 2025 23:14:10 +0000 Manifest this update: Sat 28 Jun 2025 23:14:09 +0000 Manifest next update: Sat 05 Jul 2025 23:14:09 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: IAxAcA2/PIhuAoIEFbQi0csryCJEDyRbtMayU6TIk6g=) 2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=) 3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Jun 28 23:14:09 2025 GMT Not After : Jul 5 23:14:09 2025 GMT Subject: CN=68607742-45b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:57:21:e0:72:d3:e9:1b:aa:c1:a0:3c:93: 2d:9a:aa:ed:25:42:38:7f:d9:fd:99:e3:5d:4a:ef: 85:3d:3c:16:5d:ec:35:f6:a5:3e:7b:8d:cd:f2:d0: a7:8d:27:cc:8c:ce:7f:ea:5a:65:15:dc:94:15:67: 1f:b4:1f:8b:4d:b5:d6:68:cd:49:4f:64:d0:5f:44: 1b:31:58:ca:89:c7:e9:bb:94:41:59:ed:47:cd:82: 64:15:0c:90:12:0b:d2:74:d3:65:d5:0d:7e:d1:4a: 88:fe:84:90:58:ad:06:b2:0d:40:61:52:ae:34:35: 0d:a5:b9:79:d5:53:24:1e:b2:ed:da:30:62:a4:0a: ba:0e:0e:d7:c6:91:79:8b:24:17:c3:2e:59:6a:a8: a3:99:61:62:63:66:0b:ab:fd:02:0e:f5:27:ea:e6: 2d:53:f2:f3:e3:37:7d:e2:c6:8e:a5:fa:0a:72:79: 5c:79:cf:13:74:4e:0b:e0:ac:c7:eb:2c:be:f8:02: 25:e1:f8:38:cb:0c:23:ae:96:7e:0a:92:a7:55:a0: fe:22:0c:b1:8d:1f:77:c8:76:9b:da:72:02:76:77: f5:19:38:b1:28:f6:cc:a3:0d:66:63:d3:16:8c:e9: d4:2d:56:ef:d9:61:5b:0f:6d:01:06:6e:87:68:9b: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D6:A2:D6:F0:F5:7C:1E:0E:53:35:F2:2A:83:BF:C3:11:6B:66:0F X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f2:aa:2a:d4:b6:a0:14:4f:6d:5d:c8:48:83:8e:6f:81:89: 85:e3:39:09:c7:4c:26:46:31:36:e0:e2:7c:a8:c2:8a:0b:eb: 88:ef:7b:59:6c:64:aa:91:d6:45:35:cd:35:7f:56:89:0f:a2: 10:2a:e7:c8:3a:20:dd:41:79:b8:d8:1b:2f:a3:e4:bd:fc:f0: 98:a5:fe:ca:79:c8:ef:ba:4d:25:f4:1c:e1:86:13:86:14:e0: 78:ad:4d:2a:6f:06:c7:3a:9c:f4:21:3c:f5:85:c3:43:99:fa: 9b:e3:89:6c:a9:50:81:3b:1a:5b:06:35:fe:47:77:79:bc:db: 90:26:e7:93:90:4c:f8:dd:78:ac:e5:ee:34:6b:98:32:c1:5c: 7e:80:48:c4:29:bd:62:5b:30:65:40:21:71:e8:23:b4:f3:e6: 6e:c0:42:6a:93:6a:17:bc:a4:61:56:e2:b1:39:d9:aa:01:fa: 4e:92:9e:bc:ed:d1:d1:73:85:05:a1:8f:d4:af:ad:2a:93:ba: 75:c8:38:59:2e:8e:ed:d4:09:0a:2a:ae:ca:63:1c:55:6b:fe: 68:1f:f3:2d:8e:b6:4b:a2:47:f0:2e:68:43:94:b0:24:bc:95: 37:0c:e2:55:96:ba:f6:0f:87:d1:9b:01:9e:0c:fa:13:ce:bb: 48:f3:33:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjUwNjI4MjMxNDA5WhcNMjUwNzA1MjMxNDA5WjAYMRYwFAYD VQQDEw02ODYwNzc0Mi00NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0x1XIeBy0+kbqsGgPJMtmqrtJUI4f9n9meNdSu+FPTwWXew19qU+e43N8tCn jSfMjM5/6lplFdyUFWcftB+LTbXWaM1JT2TQX0QbMVjKicfpu5RBWe1HzYJkFQyQ EgvSdNNl1Q1+0UqI/oSQWK0Gsg1AYVKuNDUNpbl51VMkHrLt2jBipAq6Dg7XxpF5 iyQXwy5ZaqijmWFiY2YLq/0CDvUn6uYtU/Lz4zd94saOpfoKcnlcec8TdE4L4KzH 6yy++AIl4fg4ywwjrpZ+CpKnVaD+IgyxjR93yHab2nICdnf1GTixKPbMow1mY9MW jOnULVbv2WFbD20BBm6HaJu9/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnWotbw 9XweDlM18iqDv8MRa2YPMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8qoq1LagFE9tXchIg45vgYmF4zkJx0wmRjE24OJ8qMKKC+uI73tZ bGSqkdZFNc01f1aJD6IQKufIOiDdQXm42Bsvo+S9/PCYpf7Kecjvuk0l9BzhhhOG FOB4rU0qbwbHOpz0ITz1hcNDmfqb44lsqVCBOxpbBjX+R3d5vNuQJueTkEz43Xis 5e40a5gywVx+gEjEKb1iWzBlQCFx6CO08+ZuwEJqk2oXvKRhVuKxOdmqAfpOkp68 7dHRc4UFoY/Ur60qk7p1yDhZLo7t1AkKKq7KYxxVa/5oH/MtjrZLokfwLmhDlLAk vJU3DOJVlrr2D4fRmwGeDPoTzrtI8zPm -----END CERTIFICATE-----Generated at Sun Jun 29 14:08:11 2025 by rpki-client